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(54) Title: SECURITY SYSTEM FOR HARD DISK DRIVE 
(57) Abstract 

A portable hard disk drive has an electrically erasable 
programmable read-only-memory (EEPROM) for storing a first 
password for allowing a user access to the disk and a random 
access memory (RAM) for temporarily storing a password 
entered by a user. A microprocessor is arranged to compare 
the user-entered password passed with the password stored in 
the EEPROM and to generate a signal to allow a user access 
to the disk if a valid match is found and to prohibit access if 
there is no match. 
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Security r sysUem^fbr ^rd disk drlvP^^ 

\ v • ' -"o-:n n3 p i nos. ■ • ** ; -i * ' V i* 

■I'irl Lnn-trrr # . •» . . . ... ~> . * 

The present invention relates to a security system 

intended for the protection of information recorded on 

■ r - , ■ ' ' ^ r ' f 'r*f chirr? r -f r * ' fi* 1 r* * ^ ■ t 'f 

miniature portable hard disk drives for use typically in 
5 small portable computers. 

The advent of the PCMCIA interface and accompanying 
plug-compatible memory products means that truly portable 
mass storage devices will soon become commonplace and 
easily interchangeable between computer systems and 
10 similar devices. 

The need for protection of confidential data files is 
of prime importance in these small disk drives as thev can 
1 easily be "lost or stolen and thus become available to 
unauthorised users. A method of protection and the 
15 protection apparatus must exist in the drive itself to 
5 ensure that it is secure wherever it is plugged in and 
run; ' ' ' : " 

Current methods of file protection such as those 
included f witliin 1 application software or those using 
20 separate f utility software packages are not particularly 
suited to portable devices as they can either be easily 
decoded by someone skilled in the art "or form part of the 
host system memory. 

A first object of the present invention is to provide 
25 a s method of ' securing the f iles on a hard disk' drive by 
means of user password protection . 

A second object of the present invention is to 
provided a system and method of securing the files on a 
hard disk 1 drive for "read only" operation. 
30 A third object of the present invention is to provide 

a method of securing the files on a hard disk drive such 
that "no access" is permitted. 

A fourth object of the present invention is to 
provide a method of providing a Master Key password for 
35 authorised secondary access in the event that the user 
password is lost. 

A fifth object of the present invention is to provide 
a method of protecting the password from discovery by 
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enciphering software programs. 

A sixth object of the invention is to provide a 
system and apparatus to enable the method to be 
implemented. 

5 In accordance with the present invention there is 

provided a memory and comparison means with a special 
utility program to enable the owner or user of a hard disk 
drive to protect the data files by setting an access 
password. 

10 According to a first aspect of the present invention there 
is provided a security system for a portable hard disk 
drive, said system comprising: 

first memory means for storing { a password for 
allowing a user to have access to information on the disk; 

15 second memory means for storing a user-entered 

password; and 

comparison means coupled to said, first memory means 
and to said second memory means for comparing the stored 
password with the user-entered password and for permitting 

20 access to information on the disk if the passwords match 
and preventing access when there is no matcji. : 

The password is conveniently stored in flash or other 
solid state non-volatile memory on the disk drive 
electronics board and it controls unauthorised access of 

25 the drive depending on the level of protection selected. 
Code used to interact with an utility program which is run 
on a computer in which the disk drive is being used in 
order to provide a reasonably user-friendly interface for 
entry and/ or amendment of passwords, setting of protection 

30 mode etc, is also conveniently stored in flash or other 
solid state memory (which may be the same device as that 
in which the password is stored) , on the disk drive 
electronics board, so that the main part of the security 
system is largely contained in the portable disk drive 

35 itself. In one possible form of the invention though the 
utility software may be formed and arranged to read in a 
computer system identification number^, (e.g. the BIOS 
Serial Np) and use this as .a "user input'' ^password to be 
compared ; against a stored password so :I that the -.drive is 
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j i -'J protected 1 ? if or ^automatic access only, (possibly ^subject to 
use of a master password) ^frdm a particular ^computer. 

{The user f may advantageously have the option of 
setting -two 1 or more different levels of security required, 
5 such as "no protection", "read only" or "full protection". 
In "no protection" mode the drive password defaults 
to a free access condition. In "read only" mode, files 
can be read but not altered and new files may not be added 
to the** drive. " In "no access" mode the drive will not 
10 allow any access. 

A Master Password is desirably provided which is 
stored in a different location in the flash memory. This 
can only be used by suitable authorised personnel to 
over-ride any user selected password, for example in the 
15 event, of a , -regular password being forgotten. The Master 
Password could be set during the manufacture of the drive, 
but more conveniently is set by a purchaser of the disk 
drive. 

The system advantageously has means which :pr event the 
20 use of special? computer programs to decode the password 
and thereby* gain access to the protected files so that if 
an illegal password is attempted, the drive "hangs" and 
requires a power-on reset before the password can be 
re-entered. 

25 i Preferably , said first memory means is a non-volatile 
r -read^onlyTmemory ?i (ROM) .i . Where a volatile memory ds used 
then the system should of course be provided with power 
supply means or at least back-up power supply means , 
though Ithisc is generally less convenient. Preferably, 

3 0 said second memory means is a random access memory. 
Conveniently, said comparison means is a 
microprocessor which is formed and arranged to fetch a 
code corresponding to said stored password from the first 
memory, fetch a code corresponding to the "user-entered" 

35 password, and store the codes in first and second 

registers, and then compare the contents of the registers 
and only if there is a valid match, access to the disk 
drive is permitted. Advantageously the microprocessor is 
further formed and arranged so that if there is no valid 
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match then the drive "hangs" and requires, a power-on reset 
before a new password is entered. 

The first memory (e.g. non-volatile ROM) , second 
memory (e.g. random access memory) and comparison means 
5 (e.g. microprocessor) are all conveniently provided in 
solid-state device means on a printed circuit board used 
for controlling the disk drive (e.g. a PCMCIA Type III 
hard disk drive) . 

According to a second aspect of the present 
10 invention, there is provided a method .of controlling 

access to a portable hard disk drive comprising the steps 
of: - 

storing a first password in a first, usually 
non-volatile .memory; ^ ^ 
15 storing a user-entered password in a second memory; 

comparing the first password with the user-entered 
password; and v 5 r 

if a valid match is found, allowing the user access 
to the disk drive. 
20 Preferably , the method includes the step of allowing 

the user selectively to access one^of . av plurality of 
different protection levels by entering a^ code ( 
corresponding to the protection level 'together with the 
password. 

25 Preferably also, the method includes the step of 

altering the password stored in the non-volatile memory by 
entering a code corresponding to a password change , 
together with the existing password stored in said 
volatile memory and the new password to be stored, so that 

3 0 said new password replaces said existing password. 

Conveniently, said codes corresponding to different 
levels of data protection and said passwords' are entered 
from a keyboard of a computer in which the disk -drive has 
been installed via a software utility run on, that 

35 computer. 

According to another aspect of the present invention, 
there is provided a circuit board for use with a portable 
disk* drive for controlling access to information on the 
disk; said circuit board comprising disk* drive' control 
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means for controlling the rotation of the^disk and for 
writing and reading information to^and from "the disk, 
first memory means disposed* on said circuit board for 
storing 'first password for allowing a user access to the 
5 disk, second memory means disposed on the circuit board 
• for storing a password entered by a user, comparison means 

mounted on the circuit board and coupled to the first and 
to the 'second memory means for comparing the stored first 
password with the user-entered password and for generating 
10 an access control signal to allow the user access to the 
disk if a valid match is found and to prohibit access if 
there is no match. 

These and other aspects of the invention will become 
apparent from' the following' description when taJcen in 
15 combination' with the accompanying drawings in which 
Fi^gs. 1 and 2 are top and bottom views of a PCB 
layout for a PCMCIA type III disk drive; 

Fig, 3 is a circuit block diagram representing the 
electronic circuitry shown in Figs. 1 and 2 
20 Fig. 4 is a flowchart of the sequence of operation 

which takes place when a user requires to set a hard disk 
into 'No Data Protection Mode'; and 

Fig. 5 is a flowchart of the sequence of operations 
which takes place when the disk drive receives a 'Data 
25 Protection" Command 1 . 

Reference is first made to Figs. 1 and 2 of the 
drawings which depict a printed circuit board generally 
indicated 7 by 'reference numeral 10 which has a plurality of 
electronic components (IC2-IC9) thereon, as indicated in 
30 Fig. 1, and which has a central aperture 12 for receiving 
the protruding flange of a spindle motor (not shown in the 
interests of clarity) . 

The general principles of operation of a PCMCIA disk 
drive are well known and will not be discussed further, as 
35 these are disclosed in applicants' copending U.K. 
Application No. 9224176.9 and corresponding patent 
publication No. W094/ 11877. As can be seen from Figs. 1, 
2 and 3, ICS is a non-volatile flash EPROM (e.g. ATMEL 
AT29C512 (64K bytes) in a 32 pin TS0P package) 
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constituting a first memory means. A user-defined 
password is stored in ICS . A software utility is run on 
the computer for setting the password and subsequent entry 
and/ or editing of the password for access to the drive 
5 data. The user's password is stored in IC7 STATIC RAM 
(e.g. Sony CXK5827ATM (32K bytes) in a 28 pin TSOP 
package) . 

The code for interacting with the software utility is 
also stored in the flash EEPROM ICS and is ,£ead into the 
10 DSP , RAM in the disk drive microprocessor IC4 (preferably a 
Zilog 286C95 in 100 pin VQFP package) prior to rewriting a 
new password in the DSP RAM. 

As described above there are various levels of data 
protection which can be. implemented with .this system. A 
15 vendor unique interface command 82h is used to control the 
data protection mechanism in the drive. This is 
transparent to the user: it is not menu driven, and 
software recognises the input code (a ^o c) to determine 
the level of protection required. Five different levels 
20 of protection are provided as follows:- - k , 

w a) No data protection (write and, read |access 

permitted); . . ■ : w £ ..j;v; 1 >■ 

b) Partial data protection (read access ; only 

permitted) ; , \ .*■ i 

25 c) Full data protection (no data access permitted) ; 

d) Low- level password alteration; and 

e) Master key password alteration. 

It will be appreciated that the passwords are entered 
from the keyboard of a computer in which the disk drive 

30 has been installed, via a menu-driven, utility. The 

low-level and master key passwords each consist of a 127 
bytes of data (the 128th byte being conveniently used to 
set a flag indicating current access mode whereby this can 
be "remembered" by the system for a subsequent access) . 

3 5 The low-level password default is all 1 FFh 1 s which serves 
as the only means of permanently disabling the, drive 1 s 
Data Protection system. Master key Password,. support is 
also: provided as a means for over-riding^ the. Low-Level 
Password. <^> A *t t: J 
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d ^ 51 " f "° Once 1 ^ s vaSl5fd %ow^#3f ^si^rd *as ¥^fi set (i.e. at 
to ) least? one* df rJ its r "i27 byte^'is 1 noh rFhf^he^Srive will 

default on a subsequent power up to Full Data Protection 

Mode. 

5 In one embodiment of the invention each of the three 

Data Protection modes is volatile and only remain in 
operation until the drive ~is ; powered off and a re-powering 
up returns the drive to the^Full Data Protection Mode. In 
a preferred embodiment though, as noted above, re-powering 

10 up can be arranged to restore the protection J mode last 

set. This 1 is particularly useful where for example it is 
desired to 'provide read-only access to one or more users 
who 5 are not password holders to allow such users readily 
to access data whilst preventing any unauthorized 

15 tampering with the data - for example, where portable hard 
disk drives are used to supply spare part, product and/ or 
pricing data which requires to be updated more or less 
frequently, to service centres, supermarkets or the like 
which Use computerized files, manufacturers etc. 

20 The particular protection levels are as follows 

a) No Data Protection Mode 

This function* allows the drive to operate in a mode where 
both Write and Read operations are permissible. It is 
executed internally under the control of the 
25 - microprocessor IC4 via the following sequence :- 

Set the : "Sector Count Register to 93h 
Set the Sector Number Register to 42tv 
r Set^ thJ Cylinder Low Register to 69h, 4 . 

i u r Set the Cylinder » High Register to 26h * ; 

30 Set the Drive/Head Register to OOh (No data 

protection 

f .*-(.' r *■ function) 
ti'*w vn<;v. n ■ * < ,* . .... ; .-z: \. 

Set the Command* Register to 82h (Data , 

protection 

35 v. command) Wait 

until .the Status Register has Busy (Bit 7) = 0 and DRQ 
(Bit 3) =1 Password loop: 
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Wait until the Drive/Head Register Bits 0-3 = Fh 
Set the Sector Count Register with the, first (or 
next) Password byte 
Set the Drive/Head Register to OOh 
5 Repeat Password loop until all 127 bytes, of the Password 
have been transferred. 

: Wait for the Status Register DRQ , (Bit3) = 0 
An Interrupt shall also be generated by the, drive upon 
command completion. J 
10 Read and Write Data access of the drive shall now be 

permitted. The above is best seen with reference to the 
flowchart in Figs. 4 and 5 of the drav.ings. Similar 
flowcharts are used for protection levels, ;b) and c) and 
the flowchart in Fig. -5. is also applicable to password 
15 changing as will be described. 

b) Partial Data Protection Mode 

This- function is implemented in exactly, /the same way 
as that of the No Data Protection Mode withi the: exception 
of the Drive/Head Register being set to - Olh .prior to 
20 setting the Command Register. ^ 

Once the command is completed, Read^Da^a access only 
shall be permitted. Attempts at sending write commands 
shall result in Aborted Command Errors. 

c) Full Data Protection Mode 

25 This function is implemented in exactly, the same way 

as that of the No Data Protection Mode with the exception 
of the Drive/Head Register being set to 02h prior to 
setting the Command Register. 

Once the command is completed, No Data access shall 

30 be permitted. Attempts at sending Write or Read commands 
shall result in Aborted Command Errors. 

d) Low- Level Password Alteration 

The Low-Level Data Protection Password can be changed 
by sending the old Low-Level Password along with the new 
35 one in the following command sequence^:-; > * 
Set the Sector Count Register to 93h 
Set the Sector Number Register to 42h 
1 * Set the : Cylinder *Ebw Register <to> t*m ! «, ;69h 

Set the Cylinder High < f Register to; i - 26h ) 
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Set the Drive/Head Register to -* ^103h 
(Password Alteratxon Function) 
Set the Command Register to 82h 

(Data Protection Command) 

5 Wait until the Status Register has Busy (bit 7) =0 and 
DRQ (bit 3) = 1 f 

; rn-^i i \ thOm. .^r^i ... ■ ' , ■. 

Password_loop_l : 

Wait t until the Drive/Head Register Bits 0-3 = Fh 
Set the Sector Count Register with the first (or 
10 next) Old Password byte 

Set the Drive /Head Register to OOh 
Repeat Password_loop_l until all 12 8 bytes of the Old 
Password have been transferred. 

Wait for the Status Register DRQ (bit 3) = 0 
15 Passwojrd^_loop_2 : 

Wait until the Drive/Head Register Bits 0-3 = Fh 
s Set v the Sector Count Register with the first (or 
next) New Password byte 
f Set the Drive /Head Register to OOh 
20 Repeat Password_loop_2 until all 127 bytes of the Old 
Password have been transferred. 

Wait until the Sector Count Register « Olh. 
An Interrupt shall also be generated by the drive upon 
command completion. 
25 e) Master Key Password Alteration 

T The 'Master Key Protection Password can be changed by 
sending* the bid Master Key Password along with the new one 
in a sequence identical to that of altering the Low-Level 
Password with the exception of setting the Drive/Head 
30 Register to 04h prior to writing the Command Register. 

The setting of a new Master Key Password ordinarily 
has no effect on the existing Low-Level Password. 
However r knowledge and unplementatin of the Master Key 
Password allows a user to change a Low-Level Password. 
35 This provides a means for recovering a drive whereby data 
protection has been invoked but the password has been 
forgotten. The intention of implementing the Master Key 
option is for use by restricted personnel only. 
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Any incorrect attempt at executing a Data Protection 
Command Function shall result in the drive being disabled 
where, only a power-on reset shall re-enable the interface. 
This prevents the use of a systematic 
5 •Guess-the-Password-Utility' being used which sends an 
incrementing password to the drive until _ it gets it 
correct. 

It will be understood that various modifications may 
be made to the invention hereinbefore described without 

10 departing from the scope of the invention.. For example, 
one or more of the memory chips may be combined with the 
microprocessor in a single chip instead of separate chips 
as. disclosed in the embodiment. . The system is - applicable 
to all sizes of portable hard disk drive,, not necessarily 

15 PCMCIA type interfaces. 

A principal advantage of the invention is that the 
security system is actually present ., in the disk drive 
itself. This means that both the hardware and software 
is present so that if the disk drive , is .moved between 

2 0 different machines, the security system will remain in 
place. A further advantage is that the ; security system 
is readily implemented on the disk drive PCB, using the 
existing chip already necessary to control the operation 
of the. disk drive. In addition, the control software is 

25 readily loaded into the disk drive circuit. 

A further advantage is that various .levels of 
protection can be readily £) set and passwords^ can be updated 
to'. reflect . a .variety, of changing ^circumstances,. u , 
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1. A security system for a portable hard "disk drive, the 
system comprising: 

first memory means for storing a first password for 
5 allowing a user to have access to information on the disk 
drive; 

second memory means for storing a second user- 
entered , password ; and 

comparison means coupled to the first memory means 
10 and to the second memory means for comparing the first and 
second passwords and for permitting access to information 
on the disk if the passwords match and preventing access 
when there is no match. 

2. A circuit board for use for with a portable disk 
15 drive for controlling access to information on the drive, 
the circuit board comprising disk drive control means for 
controlling rotation of the disk and for writing and 
reading information to and from the disk; first memory 
means disposed on the circuit board for storing a first 
20 password for allowing a user access to the disk; second 
memory means disposed on the circuit board for storing a 
second password entered by a user, comparison means 
mounted on the circuit board and coupled to the first and 
to the second memory means for comparing the first and 
25 second passwords and for generating a signal to allow the 
user access to the disk if a valid match is found and to 
prohibit access if there is no match, 

3» A system according to claim 1 or a circuit board 
according 1 to T claim 2, wherein the first miembry means is a 
30 non-volatile r rea!d-only-memory (ROM) . 

4. A system 1 or circuit board according to claim 3, 
wherein the 1 read-only-memory is an electrically eraseable 
programmable read-only-memory (EEPROM) . 

5. A system' or a circuit board according to claim 4, 

3 5 wherein a 1 voltage is used an EEPROM which EEPROM requires 
to both write data to and erase data from the EEPROM which 
voltage is in the range from 4,5 to 5.5 volts so that data 
can be erased from the EEPROM by a microcontroller. 
6» A system according to claim 1 or to any one of claims 
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3 to 5 or a circuit board according to any one of claims 2 
to 5, wherein the second memory means is random access 
memory (RAM) . 

7. A system according to claim 1 or to any one of claims 
5 3 to 6 or a circuit board according to any one of claims 2 

to 6, wherein the comparison means is a microprocessor 
arranged to fetch a code corresponding to said first 
password from the first memory means and to fetch a code 
corresponding to the user-entered password |rom the second 
10 memory means and to store these codes in first and second 
registers prior tocarrying out said comparison, 

8. A system according to claim 1 or to any one of claims 
3 to 7 or a circuit board according to any one of claims 2 
to 7 which includes means for disabling the portable disk 

15 drive in the "event that the user-entered password does not 
match the first password so that a power-on reset is 
required before a new password can be entered by the user. 

9. A system according to claim 1 or to any one of claims 
3 to 8 or a circuit board ac rding to any one , of claims 3 

20 to 8 r , wherein the first memory means is, arranged . to store 
at least a part of a software code for controlling the 
comparison means. 

10. A system according to claim 1 or to any. one of claims 
3 to 9 or a circuit board according to any, one, of claims 2 

25 to 9,. wherein the first memory means is , arranged to store 
at least two passwords each of which t each . provides a user 
with a different level of access. 

11. A system or a circuit board according to claim 10, 
wherein the comparison means is arranged to recognise when 

30 a user-entered password is a high-level, password and to 

subsequently enable the user to define the level of access 
which is obtained by a user entering a low-level password. 

12. A system or a circuit board according to claim 11, 
wherein the levels of access which can be set to include a 

35 no-data protection mode in which data .can be freely 

written to and read from, the disk drive^and a partial data 
protection mode in which , data can only : be .read from the 

diskj.driye.. „, . : „* Moa i i;l ; i^aaa^^ >ti ^. .. 

13. ^A method of controlling, access to, a* portable hard 
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disk drive and comprising the steps r o t f : 

^storing a'jfirst password in a non-volatile memory; 
storing a .second, user-entered, password in a second 
memory; 

5 comparing the first and, second passwords; and 

: .ifiJa valid match in found, allowing the] user access 
!;to the diisk drive, I . " PFi/ 1 
|14. A imethod" according to claim 13 and .including the step 
I of arrowing ,a r i user access to bne of a plurality of 
10 different protection levels by entering a \ code 

corresponding to the protection level, together with the 
passwords ; 

15., . A method according to claim 13 or claim 14 and 
including the step of altering the password stored in the 
15 non-volatile memory by entering a code corresponding to a 
password change, together with the existing password 
stored in the volatile memory and the new password to be 
stored, whereby the new password replaces the existing 
password. 
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ATA/IDE 
OR PCMCIA 
INTERFACE 



IC1 



Lhead 



-SPINDLE MOTOR 



-VCM 



HDA' 



Block No 


Function 


ici- 


Pre^amfciifier " 


IC2 - 


Data Channel 


IC3 


Mixed signal ASIC 


KM 


Micro-processor 


IC5 


Flash EEPROM 


IC6 


Interface 


IC7 




ICS 


Motor/VCM driver/controller 


ICS 


Interface (PCMCIA) 


PI 


Elastomeric connector 


P3 168 way connector 
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Password Protection Example 

The User requires to set the hard disk into No Data Protection Mode 
IThe User runs a Password Protection Utility program 







The Utility program displays a Menu of Options:- 

N - No Data Protection n 
P - Partial Data Protection | > 
F - Full Data Protection jj 
L - Change Low-level Password \ 
M - Change Master-key Password 
Q-Quit 


t * . 


. , : ■ | lb ■ 

| 1 ! X 



A t 


1 J!' 


The Utility displays:- 

No Data Protection Option selected - Enter Password:- 







[The User enters the Password 





1 


IThe Drive is now in No Data Protection Mode 






IThe User exits the Utility by selectina the Quit Option 



The other comma^s are executed in a similar fashion except that 
changing the Pj^wprds Options would prompt the User for both the 
Old and the N^PM^ords. 
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Password Protection Hard Drive Command Handling Sequence 



IThe Drive receives a Data Protection Command 



lis the Command valid?" 



Yes 



Password Data is sent to the Drive ^ 4 

The microprocessor compares each of the 128 
bytes of password with that stored in the Hash ROM 



I Password correct? I 



Yes 



No flslt a change Password Command?"! 



Yes 



128 bytes of New Password data is sent to the drive and 
is temporarily stored in RAM ' - 



IThe New Password is written to Flash ROM I 



No 



No 



The Write and Read Inhibit Rags in one of the microprocessor's 
registers are set 



The Write and Read Inhibit Flags held in one of the microprocessor's 
Registers are set according to the Data Protection Command sent 



j**:tj\\ : ii 'Mis? 



The drive enters a lock up mode only 
recoverable by a , power on reset 



'■*i:nf **». to r\* v-iy-. .* 
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